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Abstract. Let Xo{N) denote the modular curve classifying elliptic curves with a cyclic N- 
isogeny, Ao{N) its group of algebraic autmorphisms and Bo{N) the subgroup of automorphisms 
coming from matrices acting on the upper halfplane. In a well-known paper, Kenku and Momose 
showed that Ao{N) and Bo{N) are equal (all automorphisms come from matrix action) when 
Xo{N) has genus > 2, except for N = 37 and 63. 

However, there is a mistake in their analysis of the A'^ — 108 case. In the style of Kenku 
and Momose, we show that -Bo (108) is of index 2 in Ao(108) and construct an explicit new 
automorphism of order 2 on a canonical model of Xo(108). 



1. Introduction 

For a positive integer N, the modular curve Xo(N) parametrises elliptic curves with a cyclic 
A'^-isogeny. Over C, it is isomorphic, as a Riemann surface, to the quotient of the extended 
upper half-plane (r G C : 9(t) > U Q U ioo) by the subgroup ro(A^) of 5L2(Z) consisting of 

determinant 1, integral matrices (^"^^ with c = mod N, acting as r i— )• (ar + b)/{cT + d) 

( [ShiTlj or |Miy89| ). 

Xq{N) has a natural structure of an algebraic curve over Q, defined in [ShiTl^ Ch. 7] or more 
technically, as the generic fibre of the compactification of a modular scheme over Z [KM85J. 
The normaliser Nm{N) of ro(A^) in SL2(R-) acts on the extended upper half-plane and leads 

to a finite subgroup Bo{N) of Ao{N) =^ Aut c(Xo(Ar )) isomorphic to Nm{N)/To{N). The 
group-theoretic structure of Bq{N) is given in [BarOSj . The natural question, when the genus 
gN of Xo{N) > 2 and so Ao{N) is finite, is whether Bo{N) is ah of Ao{N). For N = 37 this was 
famously known not to be the case: Xq{37) is of genus 2 and is thus hyper elliptic, but the only 
non-trivial element of -Bo(37) is not a hyperelliptic involution. Ogg showed that this is the only 
case with ^o(-^) larger than Bq{N) when is squarefree |Ogg77| . 

Using deeper properties of the minimal models of Xq{N) and its Jacobian Jo{X) and some 
further techniques, Kenku and Momose extended the analysis to all N (with 17 at > 2) in [KM88], 
claiming that ^o(-^) = Bq(N) except for = 37 and possibly N = 63, and that the index of 
Bo{N) in ^o(-^) is 1 or 2 in the latter case. Subsequently, Elkies showed that = 63 is indeed 
an exceptional case and gave an elegant construction of an additional automorphism [Elk90]. 
Kenku and Momose eliminate almost all A^ by a combination of arguments that lead to only 
seven values (including 63 and 108) for which case-by-case detailed analysis is required. 

For A^ = 108, a hypothetical automorphism u not in Bq(N) is considered and is used to 
construct a non-trivial automorphism 7 in Bq(N) with various properties. Jo{N) decomposes 
(up to isogeny) into 10 elliptic curve factors and it is claimed that 7 must act upon a particular 
one E as ±1. From this, further analysis leads to a contradiction. However, E has j-invariant 
and it isn't clear from the construction why 7 (which has order 2 or 3) could not act as a 
3rd root of unity on E. I tried to derive a different contradiction assuming this, but everything 
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seemed consistent if 7 was assumed to have order 3 and act on each of the 6 CM components of 
Jo{N) as an appropriate 3rd root of unity. 

i?o(108) has order 108 by |Bar08] . Kenku and Momose show that all automorphisms of 
Xo(108) are defined over the field they denote by /c'(108), which is the ring class field mod 6 
of k{W8) = QiV^) ■■ explicitly A;'(108) is Q(^/^, v^). The primes p splitting completely in 
A;'(108) are 31,43,109,.... 

Out of interest, I decided to compute the automorphisms over the finite fields Fp for the first 
few split primes using MAGMA [BCP97_]. Equations for a canonical model of Xo(108) are found 
directly and reduced mod p using the modular form machinery. The full set of automorphisms is 
then returned very quickly by the built-in functions provided by Florian Hess. To my surprise, 
in each case the number of automorphisms was 216, twice the order of i?o(108)! 

A slightly longer Magma computation over F31 returned an abstract group G representing 
the automorphism group and it was readily verified by further Magma function calls that G did 
contain a subgroup H of index 2 with the structure of Bq(W8) as described by Bars. Finally, 
having gleaned this information from mod 31 computer computations, it remains to construct a 
new u in characteristic 0. It is possible to just mechanically run the Magma routines again but 
working over fc'(108) for the automorphism group computations is much slower and besides, as 
an important special case, it is desirable to provide a construction with some level of transparent 
mathematical detail rather than just the output of a generic computer program. 

In the next section, I review Kenku and Momose's analysis of the N = 108 case and show 
that, after removing the error, it can be adapted to prove that -Bo(108) is of index 1 or 2 in 
j4o(108) and also give the isomorphism type of Aq{108) in the index 2 case. 

In the third section, I give my construction of a new automorphism u of order 2, using 
detailed modular information about Xo(108) and its Jacobian. Specifically, I use the explicit 
action of standard generators of i?o(108) on a natural modular form basis for the differentials of 
Xo(108) along with the commutator relations within ^o(108) for u to find a fairly simple matrix, 
involving 2 undetermined parameters a and b, giving the action of u on the differentials. To 
proceed further, I used computer computations to first determine the relations for the canonical 
model of Xq(W8) w.r.t. the differential basis and then to solve for a and b. The latter involves 
computing a Grobner basis for the zero-dimensional ideal in a and b that comes from substituting 
the matrix for u into the canonical relations. The resulting automorphism on the canonical model 
is defined over ^'(108) but not A;(108) (the field of definition of Bq{108)), as it should be. 

Subsequent to my discovery and semi-computerised construction of a new automorphism, 
Elkies learned of the error through Mark Watkins. Using a neat function-theoretic argument, 
similar in some respects to the = 63 case, he was able to derive a particularly simple geometric 
model of Xo(108) as the intersection of two cubics in as well as explicitly writing down 
all automorphisms without the need for computer computations. Elkies construction gives an 
independent verification of the corrected result for N = 108 and will be published by him 
elsewhere. 

Finally, I believe that there are no other exceptional N. |KM88] is a very nice paper but it 
does seem to contain a number of mistakes, most of which have no bearing on the final result. 
In particular 

• The last two numbers in the statement of Lemma 1.6 should be 2^ • 3^^ and 2"^ ■ 3^ 

• A number of expressions in the proof of Lemma 1.6 are incorrect. Especially, most of 
the expressions in the table for fi{D,p) in different cases are wrong. 
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• N = 216 = 2^3^ listed in Corollary 1.11 and treated special case in the rest of 
the paper along with the other 3 values is not actually a special case! This is clearly 
harmless. 

• In Lemma 2.15, — 1 should he + 1. 

• In the first part of the main theorem, 2.17, the list of N for various / < 11 that cannot 
be eliminated by lemmas 2.14 and 2.15 contain a number of cases that can be easily 
eliminated by Corollary 2.11. However, there are a number of unlisted cases that cannot 
be eliminated by any of these results. If I have worked it out correctly, I think that these 
are (I'm ignoring the obvious typos in the lists here - e.g. the second N listed for I = 11 
should have 2^ rather than 2^ as a factor) 2^ • 3^ • 7 for Z = 5, 2^ • 11 for / = 3 and 3'^ • 5 
and 3^ • 19 for / = 2. The first two can be eliminated using Lemma 2.16 as is done for the 
other listed values of N. For the other two (/ = 2) cases, a slightly improved version of 
lemma 2.15 can be applied over p = 2 with D = D2 that takes into account multiplicities 
in both the zeroes and poles of D. This gives an upper bound 26 for XQ{N){Fi) which 
is less than the actual values (30 and 28 respectively) for the two cases. 

The special analyses for the final six cases (ignoring = 37 and 63) in the proof of Theorem 
2.17 all seem OK to me except when N = 108. 

2. Automorphisms of Xo(108): Generalities 

We reconsider the analysis of the Xo(108) case as given on pages 72 and 73 of |KM88j and 
show that the correct conclusion is that i?o(108) is of index 1 or 2 in 74o(108) rather than that 
j4o(108) is necessarily equal to i?o(108). 

Notation: 

Xo(108), J = Jo(108), ^o(108), Bo(108), A;(108) and /c'(108) are as described in the introduc- 
tion, a denotes one of the two generators of G(A:'(108)/A:(108)). 

Wn will denote the Atkin-Lehner involution on Xo(108) for n|108, (n, 108/n) = 1 (see, eg, 
|Miy89] or [BarOSj ). Explicitly, we could take matrix representatives mod R*ro(108) for the 
actions of Wi,W27 and wiq% on the extended upper half-plane as 

/ 28 1 \ / 27 -7 \ / -1 \ 

= ^ 108 4 J = ^ J «^108 = ^ log J 

wi is trivial. Up to scalars, the matrix for W27 is an involution and the matrix for wios is the 
product of those for W27 and W4. 

For u|6, Sv will denote the element of Bq{1QS) represented by the matrix 

5o(108) is generated by W4,tL'27,5'2 and 5*3. Its group structure is described fully later in the 
next section. We note here that the first three generators have order 2 and the last has order 3. 
The subgroup S of i?o(108) commuting with (tD4,W27) is 

{wa) X {W27) X (rs) 
where is the element of order 3 in the centre of i?o(108) defined by 

Ts := S3W27S3W27 

{S3 and W27S3W27 commute). 

The argument on page 73 of |KM88I considers a hypothetical automorphism u in Aq{108) 
not lying in Bq{W8). It is shown that u is defined over A;' (108) but not over A: (108) and the 
non-trivial automorphism 7 is defined as u'^u~^. Note that all cusps are defined over /c(108). 
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that So(108) acts transitively on the cusps and that, by their Corohary 2.3, any automorphism 
is determined by its images of oo and any other cusp. This shows, in particular, that all elements 
of -Bo(108) are defined over fc(108). 7 is shown to lie in i?o(108). 

Let /27, /se and /los denote the primitive cusp forms associated to the unique isogeny classes 
of elliptic curves with conductors 27, 36 and 108 respectively. These curves all have com- 
plex multiplication by orders of A; (108). Kenku and Momose consider the decomposition up 
to isogeny of J into the product Jh x Jci x where Jh is the part without CM, Jc^ is 
associated to the eigenforms {fm{z)i fmi'^z)^ fiQ^{z)} and is associated to the eigenforms 
1/27(2;), /27(2z), /27(4z)}. They show that 7 acts trivially on the Jh factor and that its order d 
and the genus gy of the quotient Xo(108)/(7) satisfies (i) d = 2, = 4, 5 or (ii) d = 3, = 4. 
It is also shown that 7 commutes with W4 and and so lies in S. 

E is the new elliptic curve factor of corresponding to /los- The error comes with the line 
"Then 7 acts on E under ±1". This eliminates case (ii) above and leads to a contradiction on 
the existence of u. However, there is the possibility that 

(*) 7 acts on (the optimal quotient isogeny class of) E hj & non-trivial 3rd root of unity and 
case (ii) occurs. 

We see in the next section that this actually can occur when we explicitly construct such a 
u. To have order 3 and lie in S", 7 must equal or ■ That (*) holds for such 7 follows from 
the determination of the action of the generators of i?o(108) on a nice basis for the cusp forms 
given in the construction. This shows that T3 fixes the non-CM forms defining the Jh factor 
and multiplies each of the six CM Hecke eigenforms given above by some non-trivial 3rd root of 
unity as required. 

So for any automorphism u'^u~^ is trivial or equal to or Tg"^. As Kenku and Momose 
show that all automorphisms defined over /c(108) are in i?o(108), this implies that Bq{108) is of 
index at most three in ^o(108). 

However, this can be improved by considering the action on the reduction mod 31 of Xo(108) 
and arguing as Kenku and Momose do to show that 7 is defined over A: (108). All automorphisms 
are defined over F31 as 31 splits in A;'(108). If u and v are two automorphisms not in i?o(108), 
then exactly the same argument near the top of page 73 applied to u and u"^ can be applied to 
u and V to show that vu~^ lies in Bq{W8). This shows that i?o(108) is of index at most 2 in 
Ao(108). Note that the sentence on page 73 starting "Applying lemma 2.16 to p = 7 . . ." should 
contain p = 31 rather than p = 7 and there should be a comment that lemma 2.16 is being 
applied here with any pair of cusps replacing and 00, which is permissible as the same proof 
works. So, replacing a by if necessary, we have that (remembering that T3 is in the centre 
of So(108)) 

(+) -Bo(108) is of index 1 or 2 in 74o(108) and any automorphism u ^ Bq{W8) satisfies u'^u"^ = 

n- 

Now, we assume that Ao(108) is bigger than Bq{1Q8) and show that its group structure can 
then be determined from the above information and the abstract group structure of -Bo(108). 

We denote a cyclic group of order n by Cn- |Bar08j gives the structure of -Bo(108). Abstractly, 
it is the direct product Dg x (C3 ; C2) where the first factor is the dihedral group of order 6 
and the second is the order 18 wreath product (the semidirect product of C3 x C3 by C2, the 
generator of C2 swapping the two C3 factors). The factor is generated by ^2 and 1^4, which 
both have order 2. The wreath product is generated by 53 (order 3) and 1^27 (order 2), so that 
5*3 and 1^27831027 are two commuting elements of order 3 generating the order 9 subgroup. The 
centre of -Bo(108) is of order 3, generated by T3 = S3W27S3W27- 
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The automorphism group of Bo{W8) is easy to determine from the decomposition of as Dq x 
Dq X C3. The outer automorphism group is C2 x C2. This can also be easily checked in Magma, 
for example. 

Now if u is not in Bq{W8), is in i?o(108) and so is fixed by a. Then, (+) above shows that 
UT3U~^ = so that u acts by conjugation on i?o(108) (which is normal in Ao(108) having 
index 2) as an outer automorphism, since T3 is central in Bq{108). Also, we can assume u has 
2-power order and, as the kernel of the map of Bq{W8) to its inner automorphism group is of 
order 3, ^o(108) is then determined up to isomorphism if we can determine the image of u in 
the outer automorphism group H of i?o(108). H has 3 non-trivial elements giving extensions 
of Bq{W8) of degree 2. But the condition that u doesn't centralise T3 excludes one of these 
elements. Another element would leads to a u of order 2 commuting with {w4,W27) and 82- 
From the explicit action of S2 on weight 2 forms (see next section) we see that u would have to 
preserve the {W27 — l)^Ci (= E) and {wi — l)Jc2 elliptic curve factors of the Jacobian, so act 
as lb 1 on i?. 7 would then act trivially on E and the argument of Kenku and Momose would 
properly lead to a contradiction. Thus, there is only one possibility for u in H and one possible 
group structure for ^o(108). Explicitly, we find 

Lemma 2.1. //ylo(108) is larger than Bo{108), then it contains -Bo(108) as a subgroup of index 
2 and is generated by Bq{108) and an element u of order 2 that acts on Bq{W8) by conjugacy 
as follows: 

uw^u = W27 UW27U = W4 
US2U = S3W27S^^ = S^^Tj^^W27 US3U = S2W4T3 

For an appropriate choice of a, u'^u~^ = t^. 

3. Construction of a new automorphism 

The notation introduced at the start of the last section is still in force. 
Conventions: 

If u is an automorphism of Xo(108), then we also think of it as an automorphism of J by the 
"Albanese" action: a degree zero divisor Yli^^i^i ^ Yli '^i'^i^i) ■ -^^0(108) is embedded in J 
in the usual way by i : P i— )• (P) — (oo) then the actions are compatible up to translation by 
(m(oo)) — (oo). As global differentials on J are translation invariant, this means that the pullback 
action u* on global differentials of J or Xo(108) is the same if we identify global differentials of 
J and Xo(108) by the pullback i* . 

When we identify the weight 2 cusp form f{z) of ro(108) with the complex differential 
{l/2TTi)f{z)dz on Xo(108), if n G So(108) then u*f is f\2U in the notation of Sec. 2.1 |Miy89| , 
identifying u with the 2x2 matrix representing it. As we only deal with weight 2 forms we omit 
the subscript 2. 

If we say that u is represented by matrix M w.r.t. a basis fi, ■ ■ ■ , fn of cusp forms/differentials, 
we mean that u* fi = Mjifj. So if u and v are represented by M and N, then uv is represented 
by MN. 

Jo(108) decomposes up to isogeny into a product of 10 elliptic curves defined over Q, as 
partially described in [K M88j . We work with a natural basis for the weight 2 cusp forms of 
level 108 coming from multiples of the primitive forms f27, /ae and /los which generate the CM 
part as in the last section, and the two primitive level 54 forms f^^, and their multiples by 2 
which generate a 4-dimensional non-CM complement. All the forms have rational ^'-expansions. 
We give the initial (/-expansions of the primitive forms, isogeny classes of elliptic curves over Q 
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that they correspond to and the eigenvalues for the Atkin-Lehner involutions of the base level 
(which we refer to as Wn to differentiate from the Wn involutions for level 108). 

Conductor 27 

f27 = q- 2(7^ - + 5gi3 + 4^16 _ 7^19 ^ ^^^25) 

W27 = -1 

E27 : y"^ + y = ::^y^ = + 16 

Xq{27) is of genus 1 and this is a well-known case (see |Lig75| ). f27 is {r]{3z)ri{9z)}'^ where r] 
is the Dedekind eta function (§4.4 [Miy89] ). 

Conductor 36 

f36 = q- V + 2?^=^ + 8q'^ + 0{q^'') 
Wg = 1,W4 = -1 

Em : = x3 + 1 

Xo(36) is of genus 1 and this is a well-known case (see |Lig75| ). /sq is 7?(6z)^. 
Conductor 108 

/1O8 = q + fyq' - 7q'' - q'' + 0{q^') 

W27 = 1,W4 = -1 

E108 ■.y^ = x^ + 4: 

/108 and the action of the Atkin-Lehner operators come from Tables 3 and 5 of [BK75] or from 
a modular form computer package such as William Stein's. It is easy to check that the CM 
elliptic curve E'los has conductor 108 with /los as its associated modular form (which is of the 
type described in Thm 4.8.2 of |Miy89| with K = A:(108)). 

Conductor 54 

/(]) =q-q^ + q^ + 3q'-q'-q'- 3q'' - 3q'' + 0{q'^) 

W27 = -'i-,'W2 = 1 

/(J =q + q^ + q^-Sq'-q' + q'- 3q'' + 3q'' + 0{q'') 

W27 = 1,W2 = -1 

£^54^ ■■ y"^ + xy = x^ - x'^ + 12x + 8 Ef} : y"^ + xy + y = x^ - x"^ + x - I 

The and the action of the Atkin-Lehner operators again come from Tables 3 and 5 of [BK75j 
or from a modular form computer package. It is easy to check that the elliptic curves given have 
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conductor 54 and have the respective f^^ as their associated modular forms. In fact the Es are 

quadratic twists of each other by —3 and the two f^^ are twists by the quadratic character of 
^(108). 

Definition 3.1. 5n is the operator on modular forms given by the matrix (q 5*)' i^s.^ if f{z) 
is a weight 2 form, {f\5n){z) is the form nf{nz). 



Definition 3.2. ei,...,eio are the basis for the weight 2 cusp forms of ro(108) defined as 
follows: 



ei 



f(2) 
J 54 



/54 1^2 62 



/S^ + /SV2 



65 = /27 + /27|'54 



66 



63 = 
/27|^2 



f(l) 

J 54: 



f54\^2 64 



(1) 
54 

67 = /36 + /sel^s 



/54 "T /; 



54 



68 — /1O8 69 — /27 — /27|<^4 610 — /se " /sell^S 

The standard decomposition into new and old forms (Section 4.6, |Miy89] ) shows that ei, . . . , eio 
form a basis for the weight 2 cusp forms of ro(108) 

Identifying these cusp forms with differential forms on Xo(108) and J, V := (ei, . . . , 64) is the 
subspace corresponding to differentials of Jh and W := (es, . . . , eio) the subspace corresponding 
to Jci + Jc2- All endomorphisms of J preserve these subspaces. 



Lemma 3.3. With respect to the basis ei, . . . , 64 of V, W4, W27, S2 and S3 act by the following 
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With respect to the basis 65, ... , eio of W,W4, 11)27-, S2 o-nd S3 act by the following matrices 
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Proof. The proof is a straightforward computation using relations between Atkin-Lehner invo- 
lutions and the Si and congruence conditions on the exponents of the non-zero terms of the 
g-expansions to find the 5*2 and S3 actions. 

For S2- All forms f\5i where i is 2 or 4 are clearly fixed by 82- Generally, considering q- 
expansions, if a form / is an eigenvalue of the Hecke operator T2 at its even base level with 
eigenvalue e, then we see that f\S2 = —f + ef\52- Note that /sel^a is still an eigenvector of T2 
with eigenvalue 0. This leaves only f27 to consider. As it is killed by T2, the definition of the T2 
action quickly leads to f27\S2 = — (/27 + /27|'54). 

For 5*3: /27, /se and /los all have g-expansions where all non-zero terms anq"" have n = 1 mod 
3. This follows from the fact that they are eigenvalues of all Hecke operators and that = 
if p = 2 mod 3, p > 2, as the associated elliptic curves have supersingular reduction at these 
primes so p\ap and \ap\ < 2^Jp. a2 and 03 are clearly also zero. As f^\^ and f^^ are twists by 
the (— )2 quadratic character and are killed by the T3 operator, /^^ -|- f^^ = J2n=i{3) ^n'?" ^^'^ 
— = Yln=2{3) bn'f'- From these facts, the action of ^3 on the basis follows easily. 

For Wi'. Simple matrix computations show that {f\52)\w4, = f\W2 and /|w4 = (/|VF2)|52 for 
a level 54 form /. Similarly, /|w4 = f\6/i, {f\62)\w4 = f\62 and (/|54)|w4 = / for level 27 forms; 
f\w4 = f\W4 and {f\63)\w4 = {f\W4)\53 for level 36 forms. The full W4 action follows. 

For W27- Again, simple matrix computations show that f\w27 = f\W27 and {f\S2)\w27 = 
{f\W27)\S2 for level 54 forms; f\w27 = f\W27 and {f\5i)\w27 = U'\W27)\Si ( i = 2 or 4) for level 
27 forms; f\w27 = if\Wg)\53 and {f\S3)\w27 = if\Wg) for level 36 forms. The full W27 action 
follows. □ 

Note: From the above lemma, we see that T3 acts trivially on V and multiplies each for 
i > 5 by or (^~^ as asserted in the last section. 

Using the commutator conditions for a new automorphism u of order 2 as described in Lemma 
12.11 it is now easy to show that u acts on weight two forms by a matrix ibM (w.r.t. the basis) 
with M of the form 



/ 1 
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with a, 6 S C* and z 
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^—3 as defined in Lemma 
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We can now complete the construction of « on a canonical model of Xo(108) with detailed 
computations that can be carried out using a suitable computer algebra system. The author 
performed these with Magma. There are 3 steps. 

(1) Compute a basis R for the degree 2 canonical relations for Xo(108) embedded into 
via the differential basis corresponding to the forms e^. These relations generate the full 
ideal defining Xo(108) in 
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(2) Substitute the automorphism of given by M into R treating a and h as indeterminates. 
Clear powers of a and h from denominators. The condition that each new degree 2 form 
must He in the the span of R gives a number of polynomial relations on a and h that 
generate a zero dimensional ideal la^b of A;(108)[a, 6]. 

(3) Compute a lex Grobner basis of la^b- Prom this, we can read off all solutions for a and 
h such that M gives an automorphism of Xo(108). 

For the first step we need to find a basis for the linear relations between the 55 weight 4 cusp 
forms eiCj, 1 < i < j < 10. Considering it as a regular differential of degree 2 (see Section 
2.3 |Miy89j - note that there are no elliptic points here), a weight 4 form for ro(108) that 
vanishes to order at least 2 at each cusp is zero iff it has a g-expansion X]n>2 ^nQ^ with a„ = 0, 
Vn < 38. So the computation reduces to finding a basis for the kernel of a 55 x 37 matrix with 
integer entries. In practise, it is good to work to a higher g-expansion precision than 38 and we 
actually did the computation with the expansions up to q^^^ . This still only took a fraction of a 
second in Magma. Applying an LLL-reduction to get a nice basis for the relations, the result is 
that the canonical model for Xo(108) in with coordinates Xj is defined by the ideal generated 
by the following 28 degree 2 polynomials: 

+ xqXq - X5X10, xia;2 - a^ea^g - 2:52^10, X2X6 - xsxy + xixio, x^x^ - xixs + xqXio 
ajixs - + xexio, x^xq + X1X7 - x^xio, X4a;7 - 2x8X9 + X2X10, x^x^ - Ix^xg + xixio 

X2X5 — 2X3X8 + XiXg, X2X5 — 2xqXi — XiXg, X2X4 + X7X9 — 2x8Xio, X1X7 — 2X5X9 + X3X10 
X2X3 - X5X7 - 2X6X8, X2X3 + X1X4 - 2X5X7, X7 - X2X8 - X4X9 + X^Q, xf - x| + 2X5X6 
3X1X5 — 2X4X8 — X2X9, 3Xg — X7 + xfg, 3X1X3 — X7X9 — 2x8Xio, 3xiX6 + X4X7 — X2X10 

3x3X6 — X2X7 + X4X10, 3x3X5 — X7 — X2X8 — Xio, 3xi — x\ — 2x9X10, X2 — 3x| + 2x9X10 
X2+X4— 4x7X8+2x9X10, X2X7— 4x|+2xg+X4Xio, X4X8+X2X9— 2x7X10, 3x5— X2X7— Xg— X4X10 

We are using the fact that Xo(108) is not hyperelliptic |Ogg74 |. This follows from the above 
anyway, since there would be 36 canonical quadric relations if it were. However, it needs to be 
checked that Xo(108) is not trigonal (having a degree 3 rational function) when there would be 
independent degree 3 relations. For this, it is only necessary, for example, to verify that the 
ideal defined by the above polynomials has the right Hilbert series. This was easily verified in 
Magma which uses a standard Grobner based algorithm |BS92| . 

For the second step, we work over K{a^ b), K = Q(2:), apply the substitution Xj i— )• X]i<j<io 
to the above polynomials, and the rest is strightforward linear algebra. Applying the Grobner 
basis algorithm, we find that is generated as an ideal by the two polynomials 

which gives 3 possibilities for u with a any cube root of —1/2. We remark that if u is one of 
these automorphisms then the other two are ut^ and ut^^ as expected. We also check that 
u'^u~^ = r3 if a'^ = exp{2TTi/3)a. 

Theorem 3.4. i3o(108) is of index two in ^o(108), which has the structure described in Lemma 
\2.1\ u is given explicitly on the canonical model o/Xo(108) with the above defining equations by 

[xi : X2 : X3 : X4 : X5 : X6 : X7 : X8 : Xg : xio] ^ 

[xi : ZX3 : (l/2;)x2 : X4 : (c/2;)x7 : (c^/z)x8 : {z/c)x5 : {z/c^)xq : -cxio : -(l/c)x9] 
where c^ = 2 and z = with Q{z) > 0. 
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Remarks: 

(1) The action of u on differentials is given by itM wliere M is the matrix on page 8. M 
has 1 (resp. —1) as an eigenvalue of multiplicity 6 (resp. 4). Let Y = Xq{W8) / {u) . If 
the action was by M, then the genus of Y, gy, would be 6. The Hurwitz formula would 
then give a value of —2 for the number of fixed points of u. Thus u acts on differentials 
by — M, gY = 4, and u has two fixed points on Xo(108). 

(2) On our canonical model of Xo(108), the cusp oo is given by the point (1:1:1:1:1:0: 
1:1:1:1) and the generators of i3o(108) act via the matrices given in Lemma 13.31 It 
is then easy to compute all of the cuspidal points as the cusps form a single orbit under 
Bq{W8). It is then easily verified that u{{cusps}) n {cusps} = 0. 
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